Palo Alto Software Download Failure

I had an error on my PA-200 with PAN-OS 7.0.5 while trying to download a new firmware version. “Error: There is not enough free disk space to complete the desired operation. […]”. Even the tips to delete older software, dynamic updates, etc., and to use the “set max-num-images count” command did not lead to a successful download.

Finally, the TAC support could solve the problem via root access to the Palo Alto firewall and by manually moving data files…

This was the disk space on the firewall before the TAC support corrected it (note the 5th line with 92 % usage):

1

2

3

4

5

6

7

8

weberjoh@fd-wv-fw02>show system disk-space

Filesystem Size Used Avail Use%Mounted on

/dev/sda31.9G1.5G393M79%/

/dev/sda56.6G5.8G541M92%/opt/pancfg

/dev/sda61.9G685M1.2G38%/opt/panrepo

tmpfs1.3G116M1.2G10%/dev/shm

/dev/sda82.4G1.9G372M84%/opt/panlogs

And on my monitoring server I could see that the management config partition increased its usage a few weeks ago:

The supporter now used the
debug tac-login challenge and
debug tac-login response commands to gain root access on my PA-200. (Interesting…) He said that the problem is due to not deleted AV- and content-packages. He then did the following steps:

He navigated to the folder in which the AV and content packages reside.

He moved the “newav” folder to another partition. Now there was enough disk space on the current partition.

Via the GUI, he upgraded the content packages. This worked and PAN-OS correctly deleted the temporary content files.